$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.cer File: 6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.cer (raw, json) Hash identifier: 9m3B1BHId64TdKvo2LgwxvtSFAGi+a5CsyLttZDBBuA= Subject key identifier: 08:C5:16:FE:55:6B:05:62:D3:38:35:D7:67:B5:3F:C0:57:FB:97:EE Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849E382A8C32D79FF466E4A3900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 18 May 2025 00:45:34 +0000 Certificate not after: Sat 21 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 40041 IP: 205.167.215.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:82:a8:c3:2d:79:ff:46:6e:4a:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 18 00:45:34 2025 GMT Not After : Aug 21 00:45:34 2027 GMT Subject: CN=6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:16:6a:be:78:1d:65:15:d9:eb:75:81:06: fc:e7:4f:b0:ab:7d:5e:dd:d5:61:7d:8e:6f:10:c9: 2f:96:cd:c4:fb:d1:b7:c8:e9:76:d3:f1:1a:d6:26: fd:67:ec:60:e9:c6:84:ee:00:da:7c:01:de:2b:6a: e3:04:95:0a:6e:fa:e1:81:8d:9a:e2:38:54:cf:04: 23:db:22:55:4c:c3:1a:7d:93:54:3e:13:14:f1:d1: bf:a7:87:17:45:36:46:9e:d8:b4:af:81:61:ee:d7: 4e:42:2b:6a:cd:fa:d2:76:91:9c:1a:ab:84:c8:89: ec:97:09:b6:2f:54:8a:2b:9a:9a:ed:ce:9b:47:e8: 7e:7d:ef:2f:84:74:7f:91:64:07:11:ed:6c:c1:46: ad:96:c0:e4:6d:d7:2d:af:9f:8b:0c:22:f9:44:ff: f6:e3:70:34:3c:8f:61:5f:e9:c3:8e:2b:eb:1b:11: 61:fb:35:ac:1b:00:c2:bf:75:5e:f8:1b:54:94:78: b5:47:ef:ba:1e:b7:ce:e2:8e:9d:24:31:73:32:63: bb:44:c7:7f:61:0e:3b:95:a3:9e:5a:2c:31:ca:71: e5:7c:5c:66:72:b7:d9:c4:59:05:ab:fc:b7:a6:4b: 3a:dd:2e:59:c8:55:c6:53:0e:0e:15:c8:a9:88:ef: b2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C5:16:FE:55:6B:05:62:D3:38:35:D7:67:B5:3F:C0:57:FB:97:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 205.167.215.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40041 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:64:e6:06:2c:9e:89:72:76:ce:06:9d:92:77:84:e4:20:26: 21:1a:33:0c:1c:75:3f:0b:cf:76:ff:dd:8a:85:ae:a7:ae:80: e4:83:90:66:6f:86:21:b8:9d:e3:8d:51:31:59:6a:38:18:93: f8:b2:cb:53:01:5d:00:46:30:68:95:6d:44:01:6c:f2:6d:f1: 24:d7:d3:16:46:27:65:7a:6b:21:3f:9e:33:e7:14:da:0f:a9: c2:f3:68:a9:8b:c5:9e:d1:a3:68:49:34:7b:fc:8c:fc:94:32: 39:e0:5e:b8:68:be:15:1a:7b:e7:a6:9b:1b:7a:e1:da:e6:37: 17:70:83:e7:91:ef:ca:e1:92:8f:78:1b:50:14:32:ac:a2:d2: e3:d3:54:6c:25:de:01:0b:e4:c8:5c:bd:ca:a1:49:59:7f:a6: d3:4c:8c:bd:9c:5c:e7:8c:af:1e:94:7a:71:7b:76:bd:23:be: 56:f8:9f:69:e7:6f:02:f3:79:07:eb:0e:41:b0:3f:52:d3:bb: 50:75:ef:a4:a5:e9:63:1a:45:ee:8f:e8:5d:0b:c0:f1:29:9e: 49:2f:8a:f1:1c:cd:93:6a:55:56:47:e9:45:e6:21:35:15:1d: 23:26:84:3b:a1:d7:73:89:99:3a:c3:17:a7:e5:e6:1a:5f:d5: 71:ba:1b:de -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEnjgqjDLXn/Rm5KOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDUxODAwNDUzNFoXDTI3MDgyMTAwNDUzNFowLzEtMCsGA1UEAxMk NmEwZGM1MmUtMTBjNC00YzcwLWFiYTMtM2E3YzZlOWU1Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzYWar54HWUV2et1gQb850+wq31e3dVhfY5v EMkvls3E+9G3yOl20/Ea1ib9Z+xg6caE7gDafAHeK2rjBJUKbvrhgY2a4jhUzwQj 2yJVTMMafZNUPhMU8dG/p4cXRTZGnti0r4Fh7tdOQitqzfrSdpGcGquEyInslwm2 L1SKK5qa7c6bR+h+fe8vhHR/kWQHEe1swUatlsDkbdctr5+LDCL5RP/243A0PI9h X+nDjivrGxFh+zWsGwDCv3Ve+BtUlHi1R++6HrfO4o6dJDFzMmO7RMd/YQ47laOe WiwxynHlfFxmcrfZxFkFq/y3pks63S5ZyFXGUw4OFcipiO+yRQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAjFFv5VawVi0zg112e1P8BX+5fuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82 YTBkYzUyZS0xMGM0LTRjNzAtYWJhMy0zYTdjNmU5ZTVjZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZhMGRjNTJlLTEwYzQtNGM3MC1h YmEzLTNhN2M2ZTllNWNkMS82YTBkYzUyZS0xMGM0LTRjNzAtYWJhMy0zYTdjNmU5 ZTVjZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADNp9cwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJxpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH1k5gYsnolyds4GnZJ3hOQgJiEaMwwcdT8Lz3b/3YqFrqeu gOSDkGZvhiG4neONUTFZajgYk/iyy1MBXQBGMGiVbUQBbPJt8STX0xZGJ2V6ayE/ njPnFNoPqcLzaKmLxZ7Ro2hJNHv8jPyUMjngXrhovhUae+emmxt64drmNxdwg+eR 78rhko94G1AUMqyi0uPTVGwl3gEL5MhcvcqhSVl/ptNMjL2cXOeMrx6UenF7dr0j vlb4n2nnbwLzeQfrDkGwP1LTu1B176Sl6WMaRe6P6F0LwPEpnkkvivEczZNqVVZH 6UXmITUVHSMmhDuh13OJmTrDF6fl5hpf1XG6G94= -----END CERTIFICATE-----Generated at Sun Jun 29 18:23:24 2025 by rpki-client